Remote VASP serving residents in Palau
Foreign-incorporated entity that offers exchange, custody, or transfer services to residents of a jurisdiction without establishing a local entity or office.
Remote VASP is conditionally permitted in Palau with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- CDD required under AML/CFT Act 2017 — obtain and verify full legal name, DOB, residential address, and national ID/passport for individuals; legal name, form, proof of existence, registered address, directors/partners for entities
- Beneficial ownership identification required — identify natural persons holding 25% or more of shares/voting rights
- Purpose and intended nature of business relationship must be understood and documented
- Ongoing due diligence — monitor transactions for consistency with customer profile and risk profile, including source of funds where necessary
- Enhanced Due Diligence (EDD) required for PEPs, high-risk jurisdictions, complex/unusually large transactions, and certain virtual asset transactions
- No minimum monetary threshold for STRs — any suspicious transaction regardless of amount must be reported to the Palau FIU
- No tipping-off prohibition — VASPs and employees must not disclose STR submissions to customers or third parties
- Record-keeping: CDD records for at least 5 years after business relationship ends; transaction records including wallet addresses for at least 5 years
- Risk-based approach required for virtual asset transactions — assess risks from different asset types, transaction volumes, counterparty wallets, and geographies
Key Restrictions
- No specific VASP license exists — operator must rely on general financial services licensing under the Financial Institutions Act (Title 30) if activities are interpreted as money transmission or financial services
- Cross-border remote service without a local entity is likely to be treated as unlicensed money transmission under existing law
- Local entity (incorporation in Palau) likely required to obtain any applicable license or registration
- Activities resembling money transmission, exchange of value, or payment services are highly likely to fall under the Palau Financial Institutions Act
- No specific rules for digital asset segregation, cold storage, insurance, or bonding — operator must rely on general trust/fiduciary principles
Key Risks
- Enforcement risk is moderate and growing — Palau is a FATF/APG member and expected to implement VASP-specific regulation; unlicensed remote operators face potential penalties under existing financial services and AML laws
- Regulatory ambiguity — no clear guidance on whether remote (non-local) VASP services to residents trigger licensing; PFIC or FIU could retroactively interpret activities as requiring a license
- Small financial sector with nascent enforcement — limited public enforcement history but development-focused posture may shift as FATF mutual evaluation progresses
- Palau Stablecoin (PSDC) pilot indicates government engagement with digital assets, but this does not create a safe harbor for unlicensed remote VASPs
- Reputational risk from operating in a jurisdiction with evolving AML/CFT standards and potential FATF scrutiny
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
No Specific VASP License: As of the latest information, Palau has not enacted specific legislation for the licensing or registration of virtual asset service providers (VASPs) that directly implements FATF Recommendations regarding VASP-specific licenses.
Reliance on Existing Financial Institutions Act: Cryptocurrency businesses conducting activities that resemble traditional financial services (e.g., money transmission, payments, exchange of value) would likely fall under the purview of Palau's existing financial services legislation, primarily the Palau Financial Institutions Act (Title 27 of the Palau National Code).
Cryptocurrency Exchanges (Fiat-to-Crypto, Crypto-to-Fiat, Crypto-to-Crypto):
These activities are highly likely to be considered money transmission services or similar financial services under the Palau Financial Institutions Act.
If interpreted as such, an exchange would need a license for "Money Services Business" or a similar category. This would typically apply if the exchange involves fiat currency or facilitates transfers of value between different parties.
AML/CFT Obligations: Regardless of specific licensing, all entities operating in Palau, especially those handling financial transactions, are subject to the country's AML/CFT framework. The Financial Supervisory Commission (FSC) is the primary regulator for financial institutions and oversees AML/CFT compliance.
Anti-Money Laundering and Countering the Financing of Terrorism Act of 2017 (AML/CFT Act 2017): This is the overarching legislation that defines money laundering and terrorist financing offenses, establishes reporting obligations, and outlines customer due diligence requirements for financial institutions and DNFBPs. While it may not explicitly mention "virtual assets" in all its original definitions, the broad scope of "funds" or "property" and the country's commitment to FATF recommendations mean it's interpreted to cover virtual assets.
Identification and Verification of Customers:
Beneficial Ownership Identification and Verification:
Purpose and Intended Nature of Business Relationship:
Ongoing Due Diligence:
Enhanced Due Diligence (EDD):
Risk-Based Approach to Virtual Asset Transactions:
Reporting Threshold: There is no minimum monetary threshold for reporting. Any transaction (or attempted transaction), regardless of amount, where the VASP has reasonable grounds to suspect it is linked to money laundering, terrorist financing, or other criminal activity, must be reported.
Content of Report: STRs must contain all relevant information, including the identity of the customer, details of the transaction, the grounds for suspicion, and any supporting documentation.
No Tipping-Off: VASPs and their employees are strictly prohibited from "tipping off" or disclosing to the customer or any third party that an STR is being or has been submitted.
Customer Records: All records obtained through CDD procedures (identification documents, verification records, beneficial ownership information, business relationship purpose).
Transaction Records: Details of all transactions, including amounts, types of virtual assets, dates, and parties involved (including originating and beneficiary wallet addresses).
Small Financial Sector & Nascent Regulation: Palau is a small island nation with a relatively small financial sector. While it is exploring digital assets (e.g., its national stablecoin initiative with Ripple), its regulatory framework for cryptocurrencies is still evolving. The focus tends to be on establishing foundational Anti-Money Laundering (AML) and Counter-Financing of Terrorism (CFT) compliance rather than large-scale, public enforcement actions against crypto entities.
Primary Regulatory Body: The primary body responsible for financial intelligence and AML/CFT oversight in Palau is the Palau Financial Intelligence Unit (FIU). Their work often involves suspicious transaction reports (STRs) and cooperation with international bodies like the Asia/Pacific Group on Money Laundering (APG), but individual enforcement actions with public details like specific penalties against crypto entities are not commonly published.
Focus on Development, Not Enforcement (Yet): Palau has been notably proactive in exploring the adoption of digital assets, such as its "Root Name System" initiative and the Palau Stablecoin (PSC) pilot program. This indicates a forward-looking approach, but it also means the regulatory and enforcement infrastructure for complex crypto violations may still be under development.
Palau Financial Institutions Act (Title 30 of the Palau National Code): This act governs traditional financial institutions.
Money Laundering and Proceeds of Crime Act (Title 31 of the Palau National Code): This act outlines AML/CFT obligations. As a member of the Asia/Pacific Group on Money Laundering (APG), Palau is committed to implementing the FATF Recommendations, which include virtual assets and virtual asset service providers (VASPs) within their scope. Any entity performing VASP functions (which can include custody) would be expected to comply with these general AML/CFT requirements.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- low
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a remote VASP serving Palau residents from abroad would likely need to interpret its activities as regulated financial services under the Financial Institutions Act, would require a local entity and license (if activities involve money transmission or exchange), and is subject to comprehensive AML/CFT obligations under the AML/CFT Act 2017, but the regulatory framework for VASPs is nascent and untested, creating significant ambiguity and enforcement risk.
Questions this verdict aims to answer
- May a non-resident provider serve residents from abroad?
- Does cross-border service trigger licensing, registration, or AML obligations?
- What enforcement risk exists for unlicensed remote operators?